Information Technology Security Manager

Gerald R Ford International Airport Authority • Grand Rapids, MI

1d • $121,067 - $133,173 • Onsite

About The Position

Leads and participates in the implementation, administration, and continuous improvement of the Airport’s cybersecurity environment. This role is responsible for securing the organization’s enterprise infrastructure, cloud platforms (Azure & AWS), network environments, and integrated systems, ensuring protection of critical airport operations and data. This is a hands-on engineering role requiring both security architecture, understanding and deep technical implementation capability, with a focus on identity, access control, monitoring, and incident response. Plays a critical role in ensuring the Airport’s environment is secure, resilient, compliant, and aligned with regulatory requirements.

Requirements

• Identity and Access – Working knowledge of Azure Active Directory, RBAC, Conditional Access, MFA, Privileged identity management, and Identity governance.
• Security Engineering – Working knowledge of endpoint protection and EDR tools, SIEM and logging platforms (Microsoft Sentinel or similar), threat detection and response, and vulnerability management.
• Cloud Security – Working knowledge of Azure security services and controls, secure cloud architecture principles, and monitoring and logging in cloud environments.
• Network Security – Working knowledge of firewalls and segmentation concepts, VPN and secure connectivity, and Zero Trust architecture.
• Security Frameworks – Working knowledge of NIST Cybersecurity Framework, Zero Trust principles, and general regulatory and compliance awareness.
• Strong hands-on security engineering capability.
• Ability to design and implement secure systems.
• Deep understanding of identity, access and threat detection.
• Strong analytical and problem-solving skills.
• Ability to operate independently and lead technical security initiatives.
• Strong communication skills, both technical and executive.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Seven to ten years of progressive experience in cybersecurity, information security, or cybersecurity engineering.
• Proven experience implementing security controls in enterprise environments.
• Experience securing cloud environments, Azure is preferred.
• Experience in mission-critical or regulated environments including aviation, transportation, government, or healthcare is preferred.
• Candidate must be able to pass required FBI fingerprint-based criminal history record check.

Nice To Haves

• Master’s degree is preferred.
• Microsoft Certified: Azure Security Engineer Associate preferred.
• AWS Certified Security – Specialty preferred.
• CISSP, CISM, or GIAC certification preferred.
• Certified Ethical Hacker (CEH) or equivalent technical certification preferred.

Responsibilities

• Designs, implements, and maintains security controls across cloud environments (Azure & AWS), network and infrastructure systems, and identity and access management platforms.
• Configures and manages identity systems (Entra ID/Azure AD), conditional access and MFA, and endpoint protection and security tools.
• Implements zero trust principles across the environment.
• Designs and enforces Role-Based Access Control (RBAC).
• Implements identity governance and lifecycle management.
• Secures privileged access and administrative accounts.
• Ensures consistent access policies across systems and environments.
• Implements and manages security monitoring solutions (SIEM, logging, alerting)
• Investigates and responds to security incidents.
• Develops and maintains incident response procedures.
• Improves detection capabilities across all systems.
• Secures Azure environments (compute, storage, networking, identity)
• Implements cloud-native security controls and monitoring.
• Ensures alignment with Azure security best practices and frameworks.
• Supports secure cloud architecture in collaboration with infrastructure teams.
• Works closely with network and infrastructure teams to enforce segmentation, secure connectivity, and firewall policies.
• Ensures protection of IT and operational technology environments.
• Ensures alignment with regulatory requirements (TSA, FAA, NIST).
• Supports audits, assessments, and remediation activities.
• Identifies and mitigates security risks across systems.
• Maintains documentation of controls and security posture.
• Develops, implements, and maintains security standards and best practices.
• Serves as a senior technical resource for cybersecurity engineering and operations.
• Collaborates with cross-functional teams (network, infrastructure, applications).
• Evaluates, recommends, and supports implementation of security tools and vendor solutions.
• Performs other related duties as assigned.

Benefits

• May provide technical guidance, project leadership, and work coordination for cybersecurity initiatives. Direct supervisory responsibilities may be assigned as organizational needs evolve.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior